Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft
File:                     bqB70D6DR6gFulr0iLMrL5oULvk.mft (raw, json)
Hash identifier:          ybbdobbe0/5nHhhT1b7R/BhgVaAVwShHZObsJBmUH1M=
Subject key identifier:   4B:24:3A:38:8D:6C:26:87:B2:0A:53:A2:37:F5:76:40:41:D3:01:CA
Authority key identifier: 6E:A0:7B:D0:3E:83:47:A8:05:BA:5A:F4:88:B3:2B:2F:9A:14:2E:F9
Certificate issuer:       /CN=A9150080/serialNumber=6EA07BD03E8347A805BA5AF488B32B2F9A142EF9
Certificate serial:       0489
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft
Manifest number:          0482
Signing time:             Sun 08 Jun 2025 23:41:15 +0000
Manifest this update:     Sun 08 Jun 2025 23:41:14 +0000
Manifest next update:     Sun 15 Jun 2025 23:41:14 +0000
Files and hashes:         1: bqB70D6DR6gFulr0iLMrL5oULvk.crl (hash: wBdsmX+uOrW/Icz6pwfvP1GhPQsy+p+FJ5flja4Vl1Q=)
                          2: A29B8E5A46A911EC8F95FC6EC4F9AE02.roa (hash: ep6/NjkJNZJDWkEDthfqanztHTbJuX44L/+Atn4MZWc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.crl
                          rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Jun 2025 23:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1161 (0x489)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150080, serialNumber=6EA07BD03E8347A805BA5AF488B32B2F9A142EF9
        Validity
            Not Before: Jun  8 23:41:14 2025 GMT
            Not After : Jun 15 23:41:14 2025 GMT
        Subject: CN=68461f9b-cc05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c0:65:6d:17:d2:1f:1a:1f:54:2d:8e:aa:a5:
                    f5:8d:09:c2:13:73:0a:f3:2f:e4:6f:19:14:65:ee:
                    61:4b:d8:31:df:68:61:1a:1f:47:0a:c4:1e:61:75:
                    3e:d6:68:3c:ce:71:d0:dd:ff:c0:74:99:13:81:e6:
                    7d:38:d6:d3:af:c4:70:1e:23:da:61:19:8b:ef:4d:
                    16:26:30:40:c6:b0:d3:26:f7:fb:9f:28:07:95:16:
                    f2:bb:67:4f:7f:ad:45:45:2f:97:5b:6d:fe:6e:f6:
                    25:29:d0:f2:43:05:e0:02:30:ee:ad:8c:54:88:9d:
                    97:27:1c:b1:7a:52:7b:70:98:30:09:da:65:06:32:
                    94:d1:16:fb:67:0b:11:ee:6c:a2:9e:46:a0:08:46:
                    36:36:9a:61:b3:3c:d0:b1:19:ec:ed:11:df:e6:8d:
                    1c:90:96:8b:89:4b:d9:1e:83:55:a1:94:77:b9:ff:
                    44:eb:15:04:8a:0e:c0:d2:34:4e:40:f5:99:a7:ae:
                    62:4d:ab:90:76:b8:7d:04:be:f5:79:a1:81:dc:8b:
                    fe:65:ad:fd:74:53:48:5e:c0:a0:eb:50:49:7b:6b:
                    f4:ff:cc:bc:ce:57:7e:a7:58:11:84:22:e6:a4:10:
                    78:65:40:91:ac:48:32:39:bd:b2:9d:52:2b:d3:fd:
                    1a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:24:3A:38:8D:6C:26:87:B2:0A:53:A2:37:F5:76:40:41:D3:01:CA
            X509v3 Authority Key Identifier:
                keyid:6E:A0:7B:D0:3E:83:47:A8:05:BA:5A:F4:88:B3:2B:2F:9A:14:2E:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:f7:81:12:69:e3:63:1e:23:ca:05:b5:cc:eb:78:a2:db:39:
         6a:f8:a9:23:eb:ba:69:f4:76:7b:2c:c2:c3:c0:c4:1d:05:e9:
         1f:f0:68:df:81:9a:34:45:5a:d9:1b:a6:18:d9:dd:7e:e9:89:
         55:e9:9b:a7:fa:5a:ad:0d:e7:e7:15:26:c1:74:2b:2b:18:a6:
         ad:59:fc:5b:dd:1a:1e:78:f4:16:ed:84:86:3a:12:b9:a2:f2:
         66:65:dc:0b:9c:1a:d7:b2:31:6b:25:9f:1b:77:14:de:22:8a:
         7f:d5:d2:ff:b7:8c:99:6f:64:25:84:ca:9c:28:79:a0:13:38:
         63:07:ae:5c:37:4a:2c:8c:c8:ff:07:14:96:1d:57:99:47:20:
         fa:5a:10:d6:c4:67:dc:b5:11:64:dc:5d:d5:cc:93:19:8e:e0:
         6a:f3:a2:e7:d8:86:f7:74:3a:09:d9:5d:9e:98:36:8e:6a:20:
         33:89:cd:be:8b:40:f9:85:80:d4:70:e6:60:bc:76:e3:e2:87:
         78:1d:e7:77:b2:8c:95:dd:db:70:69:d7:55:b3:4b:2e:a3:2d:
         60:dc:a3:ca:89:0c:2b:5f:29:04:90:1b:59:eb:6f:c0:df:32:
         52:14:ca:f1:82:a3:01:db:ce:4a:c3:1d:6a:fd:b0:a2:cd:2d:
         96:ab:71:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 00:52:19 2025 by rpki-client